ReviewWith the release of ZoneAlarm Security Suite 5, the popular ZoneAlarm Pro has evolved into a one-stop total...
click here for

ZoneAlarm Security Suite 5: A Total Security Solution

With the release of ZoneAlarm Security Suite 5, the popular ZoneAlarm Pro has evolved into a one-stop total security solution. Building on the base of a powerful personal firewall with
outbound program control, previous versions added features that improved e-mail and privacy protection and blocked the transmission of sensitive information. ZASuite enhances these features and adds an effective antivirus module, built-in security for instant messaging, and the ability to block undesirable Web sites.

Although the suite lacks antispama major component in competitor Norton Internet Security 2004ZASuite matches and in some cases surpasses NIS as far as well-rounded security is concerned. It offers IM protection, outbound mail monitoring beyond that of Norton AV, and the ability to monitor non-ZA anti-virus programs.

Rather than attempt to build an antivirus engine from the ground up, ZoneLabs licensed and integrated the Computer Associates antivirus engine, which in other incarnations was proved effective against known viruses by Virus Bulletin and ICSA Labs. The antivirus component scans your entire system on demand or on schedule and scans files whenever you access them, even within ZIP files. When an infected file is found, the utility can automatically repair it if possible or delete it if not.

If a file can't be repaired, you can choose to rename it manually, though at present you don't have the option to move such files into a quarantine area. A link calls up detailed information about the threat. ZASuite monitors your antivirus program and alerts you if it becomes disabled or its definitions become out of date, even if you use the consumer versions of McAfee, Norton, or Trend Micro antivirus. Do note that if you turn off the firewall to investigate a compatibility problem, the antivirus is also shut down. (And note that you can get ZoneAlarm Pro 5 without antivirus for $49.95 direct.)

ZoneLabs's existing IMsecure Pro product is now integrated into ZASuite. AOL Instant Messenger, ICQ, MSN Messenger, and Yahoo! Messenger conversations are automatically encrypted, as long as both ends are using ZASuite or any standalone version of IMsecure. IMsecure blocks IM spam (also called spim) and defends against IM-based worms and system exploits. It can also disable IM-based file sharing and streaming audio and video. Personal information defined for the IDLock feature (described below) is replaced with asterisks in outgoing IMa handy way to keep IM-happy youngsters from sharing information they shouldn't.

If indeed you need to protect children (or employees) from going to inappropriate sites, ZASuite's Web-filtering feature can block sites in over 30 distinct categories. There's even a category for blocking sites that could be used to circumvent the filter by, for example, translating a page. The filters reside on servers belonging to Cerberian, so they're always up to date, with no local updates required.

When this feature is active, the browser's request for a page triggers a simultaneous request to Cerberian's database for that page's rating. If the rating matches a blocked category, the user will see a warning explaining why the page was blocked. An optional Dynamic Real-Time Rating feature can analyze unrated pages but may slow access to such pages. Unfortunately, filtering can't be set on a per-user basis, as it can be with NIS.

The most common gripe about ZoneAlarm has always been the confusing program alerts. If an alert says "Internet Explorer is trying to access the Internet," that's easy to understand. But what if the alert warns about "Generic Host Process for Win32 Services," or "MS DTC Console Program," or "wcmdmgr"? ZASuite introduces Automatic Program Configuration (APC) to combat this problem. This feature is similar to one in Norton Personal Firewall, though we find ZoneAlarm's more effective. ZoneAlarm matches the program's MD5 signature against a growing database of over 10,000 known files; it can automatically allow known good files and block known bad files. With APC active, alerts about unknown programs nearly disappear, and those that do pop up merit investigation.

Previous versions of ZoneAlarm Pro and IMsecure Pro included IDLock, but you had to enter personal information separately in each. ZASuite stores a single shared set of personal data in various categories. To add an item, you enter its description, pick a category such as "Credit card number," and type the data. ZASuite stores a one-way encrypted version of the data, not the data itself.
Now if you type that credit card number into a Web form that's not on a trusted site, ZASuite will alert you or block it, depending on settings. In an instant message, the protected data will be replaced by asterisks. Protected data leaving the system via SMTP-based e-mail can trigger an alert or simply be replaced with asterisks. ZASuite cannot filter personal information in Exchange e-mail. We did find that random matches between private information and unrelated numbers in cookies caused occasional false alarms.

ZoneLabs continues to enhance and strengthen existing features. The stealth firewall now loads earlier in the boot process, eliminating a minuscule window of possibility for hacking. The user interface is designed to thwart a malicious program's attempt to turn off protection by sending simulated keyboard or mouse events. If an attack is detected, the firewall automatically kicks protection up a notch. The MailSafe feature blocks easy access to suspicious attachments, permitting it only after double confirmation. It also detects and blocks suspicious activity such as e-mails with too many recipients, or too many e-mails sent in a short time.

These and many other features make Zone Alarm Security Suite the only security product you need. It is very evenly matched with Norton Internet Security 2004, our other Editors' Choice in this area, so buyers should look closely at both to see which has the best mix of features for them.

Automatic Renewal Program: Your subscription will continue without interruption for as long as you wish, unless
you instruct us otherwise. Your subscription will automatically renew at the end of the term unless you authorize
cancellation. Each year, you'll receive a notice and you authorize that your credit/debit card will be charged the
annual subscription rate(s). You may cancel at any time during your subscription and receive a full refund on all
unsent issues. If your credit/debit card or other billing method can not be charged, we will bill you directly instead. Contact Customer Service